What surprises me about the list of CVEs is how many of them affect both Android and iOS. One would assume they are two completely independent codebases.
Hopefully in 2020 and beyond people will be developing these shared components in Rust instead.
Not saying it's being used here (I honestly have no idea), but it's not that much of a stretch.